Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: fUsrfJoUkfLQGKziO4i85C//S/Q6pi3FA0+snrQt7u4=
Subject key identifier: 23:E6:9F:41:E3:25:80:06:71:5F:6E:FA:21:57:B2:F8:87:60:80:75
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019EBE110D4579209A997B094A3FA757E8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0FE7
Signing time: Fri 12 Jun 2026 23:00:48 +0000
Manifest this update: Fri 12 Jun 2026 23:00:48 +0000
Manifest next update: Sat 13 Jun 2026 23:00:48 +0000
Files and hashes: 1: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: kmsL7/k8Xl6YPlO/8870olSaQvNjotOVRcL8+yaY0YQ=)
2: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (hash: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:0d:45:79:20:9a:99:7b:09:4a:3f:a7:57:e8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Jun 12 23:00:48 2026 GMT
Not After : Jun 13 23:00:48 2026 GMT
Subject: CN=23e69f41e3258006715f6efa2157b2f887608075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:67:55:6b:ae:d6:c8:5e:22:5b:d8:46:a2:10:
35:8f:53:17:22:b5:12:99:94:9f:30:85:fd:e3:dc:
d0:8f:eb:12:b1:22:34:69:6e:ec:09:42:cf:1a:35:
3f:42:7c:2e:42:58:28:2d:27:6c:e2:e7:19:b3:ee:
20:52:b7:f2:ac:d6:52:07:6f:11:58:7f:2b:c1:4f:
26:49:e7:81:13:ac:42:07:82:bb:d5:42:f6:34:6d:
ad:76:88:1b:1d:3e:04:42:aa:aa:a3:64:aa:45:df:
0e:e0:9c:c9:53:ef:3b:95:d9:0f:e2:f3:9d:36:92:
df:6c:38:9b:c5:d5:1c:b0:e5:97:c7:17:0d:91:a7:
c2:a1:67:d1:0a:68:be:79:18:92:8e:57:77:1f:83:
29:15:67:41:28:ef:83:2e:f8:bb:10:6f:1f:e9:11:
b3:2e:4a:46:fe:5b:74:c1:97:17:b1:f9:06:a4:48:
4b:9e:f6:01:c9:35:f3:11:5a:18:52:b3:e6:42:dd:
63:69:b2:ed:fa:b9:a0:8c:60:c1:0e:52:ad:46:8f:
17:10:20:a2:6c:42:5b:6b:95:47:3f:00:94:4f:12:
a9:e4:45:42:5a:01:ca:43:6c:58:49:b2:5f:5d:0d:
dd:12:df:10:e3:75:a6:ae:3b:57:f3:72:94:91:67:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:9F:41:E3:25:80:06:71:5F:6E:FA:21:57:B2:F8:87:60:80:75
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:22:5d:4b:bb:73:6a:43:e5:20:57:7b:41:02:f5:2e:6d:28:
bd:04:6b:3c:5e:98:bb:b4:fe:29:d8:76:36:37:69:43:01:14:
27:0e:5b:d6:c3:d5:f3:e2:f0:bc:d9:f5:a0:30:a9:51:2b:16:
61:60:f6:eb:fc:be:b5:3f:61:96:a4:97:5e:ba:8f:e0:31:0a:
c0:40:61:de:8a:1a:22:34:9d:dd:9f:ad:0f:56:2f:36:ec:66:
15:72:64:52:5e:9c:fc:e9:25:ce:b6:64:4b:89:cd:00:fd:d4:
02:62:ec:85:c9:a9:5b:44:2f:95:cb:1f:0f:a6:01:76:2b:2b:
5d:99:b2:1d:43:62:cb:28:e6:2e:bd:a6:b7:35:0e:e3:28:02:
1a:b1:99:9d:35:14:43:55:20:9f:7d:b3:cc:14:57:82:9d:0a:
9b:0f:ce:9f:8a:7e:b8:6a:d7:6c:d4:d3:3c:7c:d5:22:f2:b2:
3d:b1:b8:ef:bb:03:a0:6c:8c:51:bd:79:e6:51:1c:63:96:21:
7e:92:bf:2e:ee:9a:b6:42:05:3f:5d:5b:8a:7f:f6:74:e2:a3:
59:d7:3b:23:82:bd:ba:35:5a:4e:b8:2b:61:69:d0:bb:0b:f5:
20:5d:ac:21:cd:80:bf:3c:cb:b2:be:6f:0b:35:39:6b:3c:6e:
0b:1c:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:19 2026 by rpki-client